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AMENDMENTS TO THE CLAIMS: 

This listing of the claims will replace all prior versions, and listings, of the claims in this 
application. 

Listing of Claims: 

1 . (Cancelled) A method, comprising: 

in response to a request by a user to initiate a session for a service with a 
communication system, receiving from the communication system, at an authentication and 
authorization device in a home network of the user, a request for an authorization and 
authentication of the user to initiate the session; and 

using an in response to the request for the authorization and authentication of the user, 
sending by the authentication and authorization device, to a server node in the communication 
network, information comprising an authorization and authentication profile associated with 
[[a]] the user, including the authorization and authentication profil e is sent from an 
authentication and authorization devic e locat e d in a hom e n e twork to a s e rv e r nod e ; and the 
authorization and auth e ntication profil e is stor e d at th e s e rver nod e , wherein the authorization 
and authentication profile contains information which allows the server node to directly 
authorize and authenticate the user^ directly without contacting the authentication and 
authorization devic e, in order to initiate a subsequent session for a service with the 
communication system for the user , and wherein the authorization and authentication profile 
further contains information defining that the authentication and authorization device is to be 
contacted when at least one condition is met, where the at least one condition comprises that a 
number of simultaneous sessions for the user is equal to a predetermined number. 



2 



S.N.: 10/500,370 
Art Unit: 2617 

2. (Currently Amended) The method as claimed in claim 1, further comprising: 
transf e rring said information comprising the authorization and authentication profile 

is sent from the authentication and authorization device to the server node in at least one of a 
signaling path for a service setup, a service event, and a registration. 

3. (Currently Amended) The method as claimed in claim 1, wherein said 
information comprising the authorization and authentication profile indicates[[.]] that at least 
one of the authentication and authorization^,]] needs to be verified for every session initiated 
by the user . 

4. (Currently Amended) The method as claimed in claim 1, furth e r comprising: 
performing at l e ast one of th e authentication and the authorization of th e us e r wherein 

the at least one condition further comprises that if a subsequent session is a multimedia 
session then the authentication and authorization device is to be contacted . 

5. (Currrently Amended) The method as claimed in claim 4, further comprising: 
performin g, by the authentication and authorization device, at least one of the 

auth e ntication and the authorization and authentication of the user by using th e auth e ntication 
and authorization dovico and providing an indication of the authorization and authentication 
of the user in the information comprising the authorization and authentication profile sent to 
the server node. 
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6. (Currently Amended) The method as claimed in claim 4, wh e re at l e ast one of 
th e authentication and th e authorization of the us e r is p e rform e d in th e s e rv e r nod e wh e n the 
requir e d parameters are availabl e wherein the at least one condition further comprises that if a 
session is initiated at a predefined time of day and the user is being served by at least one of a 
plurality of predetermined networks then the authentication and authorization device is to be 
contacted . 

7. (Currently Amended) A method, comprising: 

sending, in response to a request from a user to initiate a session for service with a 
communications network, a request for authorization and authentication of the user towards 
an authentication and authorization device located in a home network of the user; 

receiving at a server node in the communication system, from the authentication and 
authorization device, using an information comprising an authorization and authentication 
profile associated with [[a]] the user, wh e r e in th e authorization and auth e ntication profil e is 
r e c e iv e d from an auth e ntication and authorization d e vice located in a hom e n e twork, wh e r e in 
the authorization and authentication profile is stored in a server node , wherein the 
authorization and authentication profile contains information which allows the server node to 
directly authorize and authenticate the user a directly without contacting the authentication and 
authorization devic e, in order to initiate a subsequent session for a service with the 
communication system for the user , and wherein the information further includes [a] at least 
one condition that, when satisfied, determines that the authentication and authorization device 
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is to be contacted; and 

providing access to [[a]] the service r e sponsiv e to based on said authorization and 
authentication profile, wherein the at least one condition is comprises that authorization and 
authentication is verified with the authentication and authorization device when a number of 
simultaneous sessions is equal to a predetermined number. 

8. (Currently Amended) The method as claimed in claim 7, further comprising: 
receiving a request to initiate another service with the communications network; 
determining whether that said at least one condition is not satisfied; and 

based on said at least one condition not being satisfied, providin g automatic access to 
said another service without authorizing and authenticating the use r wh e n said condition is 
not satisfi e d . 

9. (Currently Amended) The method as claimed in claim 7, further comprising: 
receiving a request to initiate another service with the communications network; 
determining wh e th e r that said at least one condition is satisfied; 

based on said at least one condition being satisfied, sending a request to authorizing 
authorize and authenticating authenticate the user to said authentication and authorization 
device wh e n said condition is satisfi e d ; and 

subsequent to authorizing and auth e nticating receiving information comprising an 
indication of authorization and authentication for the user from said authentication and 
authorization device , providing access to said another service when said authorizing 
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information indicates that the user is permitted to access said service. 

10. (Currently Amended) The method as claimed in claim 7 claim 9 , further 
comprising: 

determining whether said at least one condition is satisfied when a call session 
between said user and a service provider node is initiated. 

1 1 . (Currently Amended) The method as claimed in claim 7, further comprising: 
determining from the authorization and authentication profile associated with said 

user when said at least one condition exists during a call session between a user terminal and 
a service provider node. 

12. (Previously Presented) The method as claimed in claim 7, further comprising: 
indicating, via said authorization and authentication profile, when access to said 

service is permitted without determining, from data stored at a server node in said home 
network, whether access is permitted. 

13. -16. (Cancelled) 

17. (Currently Amended) The method as claimed in claim 7, wherein information 
indicates whether said user i s authoriz e d to access said s ervic e said at least one condition 
further comprises that if a subsequent session is a multimedia session then the authentication 
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and authorization device is to be contacted . 

1 8. (Currently Amended) The method as claimed in claim 7 claim 17 , wherein 
information indicates wh e ther said user is authenticated to access said servic e said at least one 
condition further comprises that if a subsequent session is initiated at a predefined time of dav 
and the user is being served by one of a plurality of predetermined networks then the 
authentication and authorization device is to be contacted . 

19. (Currently Amended) The method as claimed in claim 7, wherein said at least 
one condition determines a frequency at which said user is to be at least one of authorized or 
authenticated during a call session between a user terminal and a service provider node. 

20. (Cancelled) 

2 1 . (Currently Amended) An apparatus, comprising: 
at least one processor: and 

at least one memory including computer program code, where the at least one memory 
and the computer program code are configured, with the at least one processor, to cause the 
apparatus to at least: 

at l e ast one interfac e configured to receive a m e ssage request from a user terminal to 
initiate a session for a service in a communication network: aftd-te 

in response to said request from the user terminal, receive information comprising an 
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authorization and authentication profile associated with a user of the user terminal from an 
authentication and authorization device located in a home network of the user ; 

a memory configur e d to store the authorization and authentication profile associated 
with the user, wherein the authorization and authentication profile contains information 
which allows direct authorization and authentication of the user to be authoriz e d and 
auth e nticat e d directly with by the apparatus without contacting the authentication and 
authorization devic e, in order to initiate a subsequent session for a service with the 
communication system for the user , and wherein the information further includes [[a]] at least 
one condition that, when satisfied, determines that the authentication and authorization device 
is to be contacted; and 

th e apparatus configured, in response to said authorization and authentication profile, 
to generate an access message to provide [[a]] the user with access to [[a]] initiate the service 
from a service provider node, wherein the at least one condition is comprises a condition that 
authorization and authentication is verified with the authentication and authorization device 
when a number of simultaneous sessions is equal to a predetermined number. 

22-28. (Cancelled) 

29. (Currently Amended) A method, comprising: 

storing an authorization and authentication profile, associated with a user, wherein the 
authorization and authentication profile is stored at a serving node in a serving network 
wherein the authorization and authentication profile is received from an authentication and 
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authorization device located in a home network; wherein the authorization and authentication 
profile is received in response to a request by the user to initiate a session for a service with 
the serving network; and 

using said authorization and authentication profile at said serving node, wherein said 
authorization and authentication profile contains information which allows direct 
authorization and authentication of the user to bo authorized and authenticat e d dir e ctly with 
the serving node in the serving network without contacting the authentication and 
authorization device , in order to initiate a subsequent session for a service with the serving 
network for the user , wherein the information further includes [[a]] at least one condition that, 
when satisfied, determines that the authentication and authorization device is to be contacted, 
and wherein the at least one condition is comprises that authorization and authentication is 
verified with the authentication and authorization device when a number of simultaneous 
sessions is equal to a predetermined number is equal to a predetermined number. 

30. (Currently Amended) An apparatus, comprising: 
at least one processor; and 

at least one memory including computer program code, where the at least one memory 
and the computer program code are configured, with the at least one processor, to cause the 
apparatus to at least: 

an interfac e configur e d to receive a message from a user terminal , where the message 
comprises a request from a user of the user terminal to initiate a session for a service ; 
a r e c e iver configur e d to in response to the request, receive data comprising an 
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authorization and authentication profile from an authentication and authorization device 
located in a home networ k, wherein the authorization and authentication profile is associated 
with the user ; 

a memory configured to store said authorization and authentication profile; 

a proc e ssor configured to use [[an]] said authorization and authentication profile 
associated with said user terminal , wherein the authorization and authentication profile 
contains information which allows direct authorization and authentication of the [[a]] user te 
be authorized and authenticated directly with the apparatus without contacting an 
authentication and authorization device located in a home networ k, in order to initiate a 
subsequent session for a service for the user , and wherein the information further includes 
[[a]] at least one condition that, when satisfied, determines that the authentication and 
authorization device is to be contacted, and 

the processor configured to generate, in response to said authorization and 
authentication profile, an access message to provide said user with access to a service from a 
service provider node, wherein the at least one condition is comprises that authorization and 
authentication is verified with the authentication and authorization device when a number of 
simultaneous sessions is equal to a predetermined number. 

3 1 . (Currently Amended) An apparatus, comprising: 
at least one processor; and 

at least one memory including computer program code, where the at least one memory 
and the computer program code are configured, with the at least one processor, to cause the 
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apparatus to at least: 

a proc e ssor configured to use an authorization and authentication profile associated 
with a user, wherein said authorization and authentication profile was received in response to 
a request by a user to initiate a session for a service with a communication system, wherein 
the authorization and authentication profile contains information which allows direct 
authorization and authentication of the user to b e authoriz e d and auth e nticat e d dir e ctly with 
the apparatu s, in order to initiate a subsequent session for a service for the user, without 
contacting the an authentication and authorization device in a home network of the user , and 
wherein the information further includes [[a]] at least one condition that, when satisfied, 
determines that the authentication and authorization device is to be contacte d in order to 
initiate a subsequent session for a service for the user , and 

the processor configured to generate, in response to said authorization and 
authentication profile, an access message to provide said user with access to a service from a 
service provider node, wherein the condition is that authorization and authentication is 
verified with the authentication and authorization device when a number of simultaneous 
sessions is equal to a predetermined number. 

32. (Currently Amended) The apparatus as claimed in claim 30, furth e r 
comprising: a transmitter configur e d wherein the at least one memory and the computer 
program code are configured, with the at least one processor, to cause the apparatus to 
transmit said access message to the service provider node. 
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33. (Cancelled) 

34. (Previously Presented) The apparatus as claimed in claim 30, the apparatus 
comprising a serving or proxy-call session control function node. 

35. (Previously Presented) The apparatus as claimed in claim 30, wherein said 
authorization and authentication profile comprises a first data field identifying said user and a 
second data field determining when at least one of authentication and authorization of said 
user is required in order to access said service. 

36. (Cancelled) 

37. (Previously Presented) The apparatus as claimed in claim 31, comprising 
storage configured to store the authorization and authentication profile. 

38. (Currently Amended) The apparatus as claimed in claim 3 1 , furth e r 
comprising: a transmitter configured wherein the at least one memory and the computer 
program code are configured, with the at least one processor, to cause the apparatus to 
transmit said access message to the service provider node. 

39. (Cancelled) 
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40. (Previously Presented) The apparatus as claimed in claim 3 1 , the apparatus 
comprising a serving or proxy-call session control function node. 

41 . (Previously Presented) The apparatus as claimed in claim 31, wherein said 
authorization and authentication profile comprises a first data field identifying said user and a 
second data field determining when at least one of authentication and authorization of said 
user is required in order to access said service. 

42. (Currently Amended) A method, comprising: 

receiving a message from a user terminal , where the message comprises a request 
from a user of the user terminal to initiate a session for a service : 

receivin g, in response to the request, data comprising said an authorization and 
authentication profile associated with the user , where the data is received from an 
authentication and authorization device located in a home network; 

using an said authorization and authentication profile associated with [[a]] the user of 
said user terminal, wherein the authorization and authentication profile contains information 
which allows direct authorization and authentication of the user to be authorized and 
authenticated directly with a server node without contacting the authentication and 
authorization device, in order to initiate a subsequent session for a service for the user, 
wherein the information further includes [[a]] at least one condition that, when satisfied, 
determines that the authentication and authorization device is to be contacted, and wherein 
the authorization and authentication profile is stored in the server node; and 
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generating, in response to said authorization and authentication profile, an access 
message providing said user with access to a service from a service provider node, wherein 
the at least one condition is comprises that authorization and authentication is verified with 
the authentication and authorization device when a number of simultaneous sessions is equal 
to a predetermined number. 

43. (Previously Presented) The method as claimed in claim 42, further 
comprising: 

transmitting said access message to the service provider node. 

44. (Cancelled) 

45. (Previously Presented) The method as claimed in claim 42, wherein said 
authorization and authentication profile comprises a first data field identifying said user and a 
second data field determining when at least one of authentication and authorization of said 
user is required in order to access said service. 

46. (Currently Amended) A method, comprising: 

receiving data comprising an authorization and authentication profile, where the data 
is received from the authentication and authorization device in a home network of a user, 
wherein the data comprising the authorization and authentication profile is received in 
response to a request by the user to initiate a session for a service in a communication system : 
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using aft the authorization and authentication profile associated with a the user, 
wherein the authorization and authentication profile contains information which allows direct 
authorization and authentication of the user to b e authoriz e d and auth e nticat e d dir e ctly with a 
server node of the communication system without contacting an authentication and 
authorization device located in a the home network of the user , in order to initiate a 
subsequent session for a service for the user, wherein the information further includes a at 
least one condition that, when satisfied, determines that the authentication and authorization 
device is to be contacted, and wherein the an authorization and authentication profile is stored 
in a the server node; and 

generating, in response to said authorization and authentication profile, an access 
message providing said user with access to a service from a service provider node, wherein 
the at least one condition is comprises that authorization and authentication is verified with 
the authentication and authorization device when a number of simultaneous sessions is equal 
to a predetermined number. 

47. (Previously Presented) The method as claimed in claim 46, further 
comprising: 

transmitting said access message to the service provider node. 

48. (Cancelled) 

49. (Previously Presented) The method as claimed in claim 46, wherein said 
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authorization and authentication profile comprises a first data field identifying said user and a 
second data field determining when at least one of authentication and authorization of said 
user is required in order to access said service. 

50. (Currently Amended) A computer-readable storage medium embodying a 
computer program, the program executable by a processor to perform operations comprising: 

receiving a message from a user terminal , wherein the message comprises a request 
from a user of the user terminal to initiate a session for a service ; 

in response to the request, receiving data comprising an authorization and 
authentication profile, where the data is received from an authentication and authorization 
device located in a home network of the user : 

using an the authorization and authentication profile associated with a the user of the 
user terminal, wherein the authorization and authentication profile contains information 
which allows direct authorization and authentication of the use r to be authorized and 
auth e nticated directly with a server node without contacting a** the authentication and 
authorization device located in a the home network of the user , in order to initiate a 
subsequent session for a service for the user, wherein the information further includes [[a]] at 
least one condition that, when satisfied, determines that the authentication and authorization 
device is to be contacted, and wherein the authorization and authentication profile is stored in 
the server node; and 

generating, in response to said authorization and authentication profile, an access 
message providing said user with access to a service from a service provider node, wherein 
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the at least one condition is comprises that authorization and authentication is verified with 
the authentication and authorization device when a number of simultaneous sessions is equal 
to a predetermined number. 

5 1 . (Currently Amended) A computer-readable storage medium embodying a 
computer program, the program executable by a processor to perform operations comprising: 

in response to a request by a user to initiate a session for a service with a 
communication system, receiving from the communication system, at an authentication and 
authorization device in a home network of the user, a request for an authorization and 
authentication of the user to initiate the session; and 

using an in response to the request for the authorization and authentication of the user, 
sending by the authentication and authorization device, to a server node in the communication 
network, information comprising an authorization and authentication profile associated with 
[[a]] the user, wherein the authorization and authentication profile contains information 
which allows the server node to directly authorize and authenticate the user to b e authoriz e d 
and authenticated directly with a server nod e in order to initiate a subsequent session for a 
service for the user without contacting the authentication and authorization device located 
in a the home network, wherein the information further includes [[a]] at least one condition 
that, when satisfied, determines that the authentication and authorization device is to be 
contacted, and wherein the authorization and authentication profile is stored in the server 
node; and 

generating, in response to said authorization and authentication profile, an access 
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message providing said user with access to a service from a service provider node, wherein 
the at least one condition is comprises that authorization and authentication is verified with 
the authentication and authorization device when a number of simultaneous sessions for the 
user is equal to a predetermined number. 
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